Note that there are some explanatory texts on larger screens.

plurals
  1. PO
    primarykey
    data
    text
    <p>Assuming OCSP is properly configured:</p> <p>1) The revocation should be stored in the Validation Authority database, and confirmed upon request. OCSP Responders will know of the revocation of certificate B. Clients should ask.</p> <p>2) I don't know about an internet connection, but either the certificate provides a validation authority url to verify the certificate, or the client has one already configured. If such URL is an internet one, the answer is yes.</p> <p>3) I think not, after all the certificate could be compromised. That said if you're using a custom root CA, you should need an internet connection. Network access yes, but no more.</p> <p>4) The OCSP request is signed, so it wouldd take a big effort to compromise it and fake the response. It can be done, but i guess if someone can do that, it can do far more interesting things.</p> <p>5) I think so. If the OCSP request is completed and the certificate is revoked, then it goes into Untrusted Certificates. That's windows standard behavior.</p> <p>6) Thats a broad question, if you use a certificate for code signing, and it's performed by the CLR you should be able to load a signed assembly. But there may be a way.</p> <p>7) I guess so, if you can open the assembly with ILSpy or similar tools, you may be able to get some version of the source code and recompile it. Same with ILDASM</p> <p>Is it secure? Yes, pretty much. But if you need additional security you should offuscate your code and provide an internal validation step, something like an embedded certificate in the assembly that you explicitly validate via OCSP and any failure in the process prevents further use of your code.</p>
    singulars
    1. This table or related slice is empty.
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. VO
      singulars
      1. This table or related slice is empty.
    2. VO
      singulars
      1. This table or related slice is empty.
    1. This table or related slice is empty.
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload